Cyber Attacks
Police Urge Passkey Adoption as Account Takeover Cybercrime Profits Surge
Law enforcement officials are recommending passkeys after new data shows a massive annual increase in revenue from stolen accounts.
account takeover
Everything Threat Times has reported about account takeover: 4 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
Attackers Exploit Fortinet Flaw to Lock Out Admins via Account Manipulation
Threat actors are abusing a Fortinet vulnerability to delete legitimate administrator accounts and passwords, effectively locking victims out of their security devices.
Cloud Security
SaaS Account Takeover Explained: How Identity Theft Works
Attackers rarely break into SaaS software directly; they steal the digital keys you already hold to walk through the front door with full authority.
Vulnerabilities
Critical Account Takeover Flaw Found in PHPNuxBill Password Reset Flow
Unauthenticated attackers can brute-force OTP codes in PHPNuxBill to hijack customer accounts without triggering lockouts or rate limits.